Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35333a3a2f34382d3438203d3e203133333335.roa
File:                     323830333a663830303a35333a3a2f34382d3438203d3e203133333335.roa (raw, json)
Hash identifier:          pduQxL4lPPbumj50vY1EMp7of7AsKoIhm870LvNptoQ=
Subject key identifier:   41:4A:6E:00:26:B7:FD:5C:38:68:F5:E2:3B:3D:5F:69:DD:FF:51:C0
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       51539E6B30B3AA38F81C8CB2299C210A3850ADE0
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35333a3a2f34382d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:29 +0000
ROA not before:           Wed 29 Jul 2026 16:50:29 +0000
ROA not after:            Wed 28 Jul 2027 16:55:29 +0000
asID:                     13335
IP address blocks:        2803:f800:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:53:9e:6b:30:b3:aa:38:f8:1c:8c:b2:29:9c:21:0a:38:50:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:29 2026 GMT
            Not After : Jul 28 16:55:29 2027 GMT
        Subject: CN=414A6E0026B7FD5C3868F5E23B3D5F69DDFF51C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:db:69:5b:40:5d:7b:8a:8f:5e:95:2f:93:
                    f9:cc:e9:c2:f4:8e:ce:5e:81:f8:00:92:4d:eb:1f:
                    9f:6f:77:94:13:3f:ef:92:6a:df:be:0a:21:a1:fc:
                    04:a2:ae:f6:77:61:eb:97:c7:42:95:9b:42:f4:ec:
                    1e:3c:74:ff:b1:c7:dd:7f:e6:e4:9f:d8:d9:da:82:
                    01:b0:1d:9f:32:73:81:4e:93:05:38:3a:ba:a8:0a:
                    e4:d4:dc:d3:5c:1e:cf:e0:de:96:eb:20:bb:3f:93:
                    2d:26:e1:47:10:6b:89:9b:79:1b:47:85:0c:c5:eb:
                    79:b0:9f:f9:cd:c5:2d:22:b7:de:de:04:24:01:eb:
                    f6:8d:8d:7d:a5:f2:95:c8:aa:0f:0a:e6:af:c2:05:
                    f8:d6:a1:a2:0e:c6:84:c8:f7:cc:50:1e:30:be:fd:
                    e4:ee:13:a8:7a:3d:78:b4:0f:a7:a8:69:a4:42:0b:
                    96:d4:35:67:0d:bb:63:2b:b9:7e:c3:a9:b0:47:9f:
                    4d:5f:76:f1:2a:4a:79:d1:f5:78:15:a5:4b:ff:a5:
                    ec:10:95:02:60:f8:39:23:9b:a3:1d:ae:8e:f6:df:
                    f2:4f:c6:69:21:74:2a:c1:e6:e8:cf:29:5a:20:fc:
                    a4:88:f6:50:b3:96:2c:a8:e7:4c:d8:0c:42:03:0a:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4A:6E:00:26:B7:FD:5C:38:68:F5:E2:3B:3D:5F:69:DD:FF:51:C0
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35333a3a2f34382d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:24:e3:54:89:eb:a2:16:92:c8:4c:eb:42:99:c5:66:51:
         d4:fb:d5:e3:e8:9e:14:6b:bf:37:db:6a:ce:ad:4d:6c:d3:5b:
         59:2e:87:1f:e9:df:e9:d1:12:c6:db:1d:0a:08:63:56:c1:c4:
         7a:22:8e:d0:3d:fe:15:d0:d4:74:1a:90:83:72:71:1a:85:34:
         d0:7e:37:25:c7:7b:7d:de:08:3b:9b:eb:7c:72:6a:27:cf:44:
         f6:38:94:58:70:83:ed:8d:cc:a8:3e:94:c2:aa:1e:b0:54:5c:
         65:08:3f:b6:c6:bb:60:99:dc:95:1e:5d:f7:85:29:55:83:4f:
         75:95:8f:59:8c:d7:37:9d:07:c0:aa:36:4c:f8:54:1e:b2:47:
         f8:bf:41:3b:ff:75:1f:b9:77:38:0b:0f:ba:8f:85:ad:4a:cd:
         60:13:b0:36:45:39:00:c4:80:60:23:7a:f4:83:f2:a7:08:65:
         f6:75:82:e4:02:79:93:f4:6a:a1:ad:69:13:66:66:49:75:3b:
         b3:12:49:14:ef:99:06:ca:dc:b6:d1:9f:12:f2:98:a5:5a:cf:
         2b:63:06:46:27:1c:7d:39:ed:84:4b:14:62:c7:0f:a7:08:11:
         87:59:75:ef:ea:b1:c0:3e:5a:b1:e7:a4:87:22:4b:70:86:79:
         9a:d7:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:34:51 2026 by rpki-client